Onapsis Security Advisory ONAPSIS-2016-036: SAP Security Audit Log invalid address logging

Posted by Onapsis Research on Oct 03

Onapsis Security Advisory ONAPSIS-2016-036: SAP Security Audit Log invalid address logging

1. Impact on Business
=====================
By exploiting this vulnerability an attacker could tamper the audit logs, hiding his trails after an attack to a SAP
system.

Risk Level: High

2. Advisory Information
=======================
– Public Release Date: 09/22/2016
– Last Revised: 09/22/2016
– Security Advisory ID: ONAPSIS-2016-036
– Onapsis SVS ID:…

Leave a Reply